Lucene search

[email protected]NVD:CVE-2012-5769

HistoryJan 01, 2013 - 12:35 p.m.

CVE-2012-5769

2013-01-0112:35:14

[email protected]

web.nvd.nist.gov

5.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:N/A:P

6.8 Medium

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

78.3%

JSON

IBM SPSS Modeler 14.0, 14.1, 14.2 through FP3, and 15.0 before FP2 allows remote attackers to read arbitrary files, and possibly send HTTP requests to intranet servers or cause a denial of service (CPU and memory consumption), via an XML external entity declaration in conjunction with an entity reference.

Affected configurations

NVD

Node

ibmspss_modelerMatch14.0.0.0

ibmspss_modelerMatch14.0.0.1

ibmspss_modelerMatch14.0.0.2

ibmspss_modelerMatch14.1.0.0

ibmspss_modelerMatch14.1.0.1

ibmspss_modelerMatch14.1.0.2

ibmspss_modelerMatch14.2.0.0

ibmspss_modelerMatch14.2.0.1

ibmspss_modelerMatch14.2.0.2

ibmspss_modelerMatch14.2.0.3

ibmspss_modelerMatch15.0.0.0

ibmspss_modelerMatch15.0.0.1

References

www-01.ibm.com/support/docview.wss?uid=swg1PM79454

www-01.ibm.com/support/docview.wss?uid=swg21620758

www-01.ibm.com/support/docview.wss?uid=swg24034122

exchange.xforce.ibmcloud.com/vulnerabilities/80316

5.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:N/A:P

6.8 Medium

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

78.3%

JSON

Related for NVD:CVE-2012-5769

cvelist1 cve1 ibm1 prion1